Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/b287c706-2d12-3e67-bc19-1bb937299cb7.roa
File: b287c706-2d12-3e67-bc19-1bb937299cb7.roa (raw, json)
Hash identifier: IvpfFs906pni4TxewP4q8iaXtsGJrGgZKDgfreva3BY=
Subject key identifier: 77:C3:AA:D7:39:DF:D3:58:71:33:B7:E7:02:36:D4:AE:57:0D:F3:78
Certificate issuer: /CN=a07401de-4b0a-4532-ac08-dba8b0588c48
Certificate serial: 010D0C9F432858494B641CCF968A5A94A84A7480
Authority key identifier: 2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/b287c706-2d12-3e67-bc19-1bb937299cb7.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 397501
IP address blocks: 128.211.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:1c:cf:96:8a:5a:94:a8:4a:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07401de-4b0a-4532-ac08-dba8b0588c48
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=d9a56dd7-c15b-4bca-924a-08a4d0263df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d5:f9:9c:70:59:1a:65:8a:79:02:8d:75:4f:
96:f4:1d:6a:83:2c:3d:06:18:da:d4:4c:2a:0d:6d:
53:ce:d3:01:e5:f6:ad:a6:21:94:8e:7d:d9:cc:7a:
8f:85:c9:ed:67:de:ad:25:bd:dd:06:a9:c9:a1:5b:
8f:7f:ea:d1:d8:7e:c4:55:7d:9b:b6:ae:d8:91:eb:
5f:65:49:85:ba:aa:bc:7d:40:ea:d3:92:94:d2:31:
1a:0e:88:e1:53:9a:2a:29:6a:23:ed:bf:d4:d7:00:
bb:cd:82:38:7c:0a:5f:c1:48:bd:39:73:7f:bd:fc:
af:26:a1:20:c3:99:7c:de:0c:b3:bc:5e:ce:d4:83:
6d:d3:a1:ca:57:6f:7c:bb:45:45:fc:53:04:66:ad:
63:09:1e:ae:c4:f6:c5:e4:03:0f:90:2a:6f:05:cc:
09:aa:7f:78:62:28:4e:26:93:95:8c:92:ac:ff:b4:
68:34:83:ee:7d:70:7f:2d:4a:98:13:44:7f:43:30:
7d:73:f4:21:5d:08:3e:ff:69:8b:16:64:c7:0f:7e:
29:ff:62:c1:4b:81:ea:16:fe:5b:41:58:71:5f:e6:
44:e5:9e:19:2a:88:60:26:02:f5:66:59:84:87:56:
d2:17:47:3d:27:57:61:0a:45:9f:d8:e7:1d:99:d0:
65:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C3:AA:D7:39:DF:D3:58:71:33:B7:E7:02:36:D4:AE:57:0D:F3:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/b287c706-2d12-3e67-bc19-1bb937299cb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl
X509v3 Authority Key Identifier:
keyid:2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
sbgp-ipAddrBlock: critical
IPv4:
128.211.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:b3:16:56:c4:36:19:68:b0:35:5d:db:81:cc:53:b9:19:bf:
42:a1:cf:6d:65:d0:48:cc:c5:34:1a:90:01:9f:3d:87:8f:32:
0a:f2:d2:83:d2:f7:27:f4:94:52:ec:9f:05:b0:73:f9:da:77:
fc:a3:43:f3:7a:08:8e:2c:94:51:cd:a9:13:b1:b1:b6:c4:49:
98:04:47:20:92:a8:46:0e:3a:f9:6e:98:92:33:c0:f9:94:f9:
54:3a:fe:1f:14:59:44:02:16:d3:14:fd:65:c4:44:2a:7e:49:
6d:40:3f:83:e4:0b:80:7d:ac:05:50:bd:23:ab:a2:ea:0e:e1:
b7:da:46:ec:23:b0:42:c2:ae:a5:f0:a7:80:c8:0a:e4:45:56:
57:f1:37:b7:9f:14:ed:7e:87:83:1a:25:05:d8:07:99:3b:38:
76:2d:c0:12:d5:b9:26:6d:16:01:5f:b3:0c:eb:b7:e0:b3:aa:
86:40:4c:22:08:39:0a:7e:4c:c1:54:56:07:03:50:2e:d9:12:
88:0c:72:4a:d5:24:b8:f9:0d:1c:2c:44:b8:5d:66:32:4d:f9:
4a:23:fb:69:9f:58:f8:a3:d0:66:b7:f6:2b:e0:62:cc:8f:7a:
91:2d:98:48:c8:0b:39:59:ba:43:42:2f:bd:14:ba:0b:c4:f2:
37:6c:d3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:55:59 2025 by rpki-client